🟠 High ⏱ 15–60 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-10868 CVE-2017-10869 CVE-2017-10872 CVE-2017-10908 CVE-2018-0608 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 +5 more Upstream summary: H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the […]
🟢 Low ⏱ 5–15 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2001 Upstream summary: Buffer overflow in X.org libXxf86vm 1.1.2 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted […]
🟠 High ⏱ 15–60 min Last verified: 22 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1377 CVE-2004-1138 CVE-2005-0069 CVE-2005-2368 CVE-2007-2438 CVE-2007-2953 CVE-2008-2712 CVE-2008-3074 +12 more Upstream summary: vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-15256 CVE-2021-23434 CVE-2021-3805 Upstream summary: A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode […]
🟢 Low ⏱ 5–15 min Last verified: 21 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-3999 Upstream summary: The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-5191 CVE-2018-17960 CVE-2021-26271 CVE-2021-26272 CVE-2021-32808 CVE-2021-32809 CVE-2021-33829 CVE-2021-37695 +9 more Upstream summary: Cross-site scripting (XSS) vulnerability in the Preview plugin before 4.4.3 in CKEditor allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-21365 CVE-2022-35583 Upstream summary: Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running […]
🟡 Medium ⏱ 10–30 min Last verified: 20 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1318 CVE-2008-1468 CVE-2009-5028 CVE-2011-4345 Upstream summary: Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-27650 Upstream summary: A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3373 Upstream summary: paxtest handles temporary files insecurely Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix […]
